MitreCVE-2009-4440CVE-2009-4440
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
86.4%
Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly handle multiple client connections within a short time window, which allows remote attackers to hijack the backend connection of an authenticated user, and obtain the privileges of this user, by making a client connection in opportunistic circumstances, related to “long binds,” aka Bug Ids 6828462 and 6823593.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sun | java_system_directory_server | 6.0 | cpe:2.3:a:sun:java_system_directory_server:6.0:*:enterprise:*:*:*:*:* |
| sun | java_system_directory_server | 6.1 | cpe:2.3:a:sun:java_system_directory_server:6.1:enterprise:*:*:*:*:*:* |
| sun | java_system_directory_server | 6.2 | cpe:2.3:a:sun:java_system_directory_server:6.2:enterprise:*:*:*:*:*:* |
| sun | java_system_directory_server | 6.3 | cpe:2.3:a:sun:java_system_directory_server:6.3:enterprise:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
86.4%